jx0n0 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

airbug

Airbug(空气洞)，收集漏洞poc以及详情用于学习。

androidsecuritystudy

安卓应用安全学习

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

auto-earn

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-security-weixin-official-accounts

网络安全类公众号推荐，欢迎大家推荐

awesomexss

Awesome XSS stuff

badcode

恶意代码逃逸源代码 http://payloads.online

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugscan

w8ay专属扫描器

burpplugins

Some BurpPlugins used in pentest

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

bypass-av-note

免杀技术大杂烩---乱拳也打不死老师傅

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

chicken

Basing on wechat.The manager for graduate information on college.

cms-hunter

CMS漏洞测试用例集合

codeql-uboot

darthsidious-chinese

DarthSidious 中文版

deepweb

暗网网址大全TOR

dirty_sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hello-world

The begaining

hvvexploitapply

使用JAVAFX图形化界面检测对HVV中常见的重点CMS系统和OA系统的已公开的漏洞进行验证。

infosec

Cyber | Cloud Security Checklist | Incident Response | Policy Template | Use cases